If SCM_CRED passing were a real problem in _any_ scenario, SELinux should target that instead, not an entire subsystem on which half the system is built
The point is you need the ability to express both "these are the same thing" and "these are different". You can do both with SELinux. What's your alternative?